Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3730303a3a2f34302d3430203d3e20323632363137.roa
File:                     323830343a3930633a3730303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier:          H4GrlqYpDVrJ5QvsM2N+hnQ6RhSHjArcYmjFAvxO/NM=
Subject key identifier:   C2:6D:8F:3A:13:23:54:52:35:E7:43:17:FA:0E:BA:ED:6B:76:B1:E5
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       271853EB6F0DAD341FC4077456DC4971A193F817
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3730303a3a2f34302d3430203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:06 +0000
ROA not before:           Thu 03 Aug 2023 13:04:06 +0000
ROA not after:            Thu 01 Aug 2024 13:09:06 +0000
asID:                     262617
IP address blocks:        2804:90c:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:18:53:eb:6f:0d:ad:34:1f:c4:07:74:56:dc:49:71:a1:93:f8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:06 2023 GMT
            Not After : Aug  1 13:09:06 2024 GMT
        Subject: CN=C26D8F3A1323545235E74317FA0EBAED6B76B1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:23:69:6c:cc:42:af:6d:16:2b:94:c2:71:f9:
                    02:e2:e4:a0:5d:11:1d:69:08:c6:1a:a9:4e:1a:85:
                    06:99:a9:bc:82:16:d5:ec:29:96:7d:ef:fa:c3:72:
                    a6:c7:d0:b9:2a:51:c0:f7:77:e2:6e:37:eb:12:16:
                    4b:18:f5:03:e2:cc:58:5c:d3:13:70:46:48:ef:25:
                    ce:ac:43:64:e7:e7:54:ba:3e:f4:57:90:08:0d:d7:
                    8f:01:3b:4b:68:bb:8e:bc:63:ef:94:51:d2:0d:9e:
                    52:8a:8f:9a:5d:d9:30:e9:49:a3:1d:97:f6:61:1c:
                    8a:60:b4:fd:b2:e1:a8:18:69:23:98:c3:06:c6:87:
                    38:4d:9f:8a:c9:0d:c3:f6:a7:e8:77:a2:95:a5:1c:
                    ae:c5:69:34:c9:58:03:84:31:bc:be:ac:26:20:9c:
                    4d:91:a8:96:73:06:4e:1b:46:af:ea:51:d2:ff:77:
                    17:70:be:ef:a4:8b:83:1f:15:98:3d:0d:37:8a:70:
                    af:dc:cd:2c:ad:5e:18:cc:78:3b:e1:fb:d3:04:dc:
                    7e:7c:29:64:c1:26:bf:4e:e9:4b:a6:17:83:6b:d1:
                    1e:30:ac:76:af:d5:b6:b7:ee:ae:1e:d4:c6:28:17:
                    f1:fb:47:08:a1:45:4b:57:83:0f:9d:a5:d4:29:53:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:8F:3A:13:23:54:52:35:E7:43:17:FA:0E:BA:ED:6B:76:B1:E5
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3730303a3a2f34302d3430203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:d0:59:bb:5f:41:8f:8c:a9:97:bb:ba:bd:51:f1:bb:1b:d4:
         ea:fb:fb:32:eb:ad:80:07:70:04:78:8f:b7:65:e5:e5:bc:9e:
         8a:77:c6:f0:91:46:89:5f:47:f6:82:7a:e4:8d:4a:2a:42:37:
         f6:4f:45:b7:0a:19:8c:bd:bd:b5:07:16:97:4c:01:bb:84:bf:
         7f:61:f5:f0:92:20:61:34:d8:18:b6:48:a8:1f:da:71:70:9e:
         9d:4d:22:90:5d:19:68:c1:43:cb:72:69:4e:da:6e:70:da:d9:
         b8:45:18:5f:85:34:67:7e:34:0a:af:81:b0:28:63:0d:dd:02:
         ab:82:20:89:45:bd:b2:00:7f:69:54:0e:93:70:79:50:dc:23:
         8d:ea:09:bd:80:7d:c1:91:1d:c9:82:30:ae:48:4f:89:87:19:
         12:69:a7:2d:5d:2a:f0:2a:25:f1:c2:3b:a4:32:9f:95:61:4a:
         31:1c:94:ee:c9:1f:cc:a4:53:c4:d2:32:3c:c4:a9:ad:cf:d4:
         7b:c6:94:62:d5:4f:06:a4:4f:97:89:0e:40:2d:2f:c5:cd:ef:
         a7:48:b3:5e:6b:f1:2a:2f:5b:0a:34:36:d1:f2:94:b2:54:6c:
         28:b3:1c:d1:d9:04:9e:bf:ba:0d:e4:6c:d1:41:d2:f9:ef:20:
         57:ac:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org